Skip to content
OpenAdvisories

Package · Debian

cgit

4 known vulnerabilities.

4 results · Feed

  • Unscored —
    CVE-2018-14912 Public exploit EPSS 92%

    cgit_clone_objects in CGit before 1.2.1 has a directory traversal vulnerability when `enable-http-clone=1` is not turne…

  • Unscored —

    CRLF injection vulnerability in the cgit_print_http_headers function in ui-shared.c in CGit before 0.12 allows remote a…

  • Unscored —

    CRLF injection vulnerability in the ui-blob handler in CGit before 0.12 allows remote attackers to inject arbitrary HTT…

  • Unscored —

    Integer overflow in the authenticate_post function in CGit before 0.12 allows remote attackers to have unspecified impa…